CVE-2024-55930 is a medium severity flaw (CVSS 6.7) in Xerox Workplace Suite. Weak default folder permissions let unauthorized users access, modify or delete files. Xerox says it is mitigated in version 5.6.701.9, so update to that release or later and check the permissions on the server's application folders.
What's affected
The record describes Xerox Workplace Suite with weak default folder permissions that allow unauthorized users to access, modify, or delete files. Xerox bulletin XRX25-002, published on 23 January 2025, lists it as CVE-2024-55930 and says it is mitigated in Workplace Suite version 5.6.701.9.
The bulletin does not give the first affected version. Treat any release older than 5.6.701.9 as in scope and confirm with Xerox if you run something unusual. This is one of seven CVEs in the same bulletin, which also covers header manipulation, token generation, secrets handling and mail spoofing.
How to check if you're exposed
Check the installed version first. If it is older than 5.6.701.9, plan the update.
This weakness is about the operating system, not the network. The vector in the record shows a local attack with high privileges required, so the question is who has a login on the server, or could get one. Check the following on the server that hosts the product:
- Which local users and groups can sign in, by console, remote desktop or service accounts.
- Who has read, write or delete access to the application's install and data folders, using your operating system's permission tools.
- Whether any broad group, such as all authenticated users, has write access to a folder the service reads from.
Record what you find before you change anything, so that an application issue after the change is easy to trace.
What to do now
- Confirm the installed Workplace Suite version and plan the upgrade to 5.6.701.9 or later.
- List the accounts that can log on to the server locally or through remote desktop, and remove those that do not need it.
- Review the permissions on the application folders and remove write and delete rights from broad groups.
- Follow Xerox's installation guidance for the update, since the vendor fix is the supported way to correct default permissions.
- Treat the server as a sensitive asset in your inventory, because print management servers hold credentials and document data.
- Read the rest of bulletin XRX25-002 and handle the related CVEs together.
Why it matters
The weakness is CWE-276, incorrect default permissions. It is an easy mistake to make and an easy one to miss. An installer creates folders with whatever access the parent folder has, and nobody looks again. Later, a user who should only be able to read a file can change or delete it.
Because the attack is local and needs high privileges in the vector, the score stays at medium. Its real value to an attacker is as a second step. If someone already has a foothold on the server, loose folder permissions can turn a small foothold into control of the service. That is why a permissions fix sits in the same release as the more serious file access flaws, and why the KEV flag being false does not make it safe to ignore.
Quick check
Can this be exploited over the network?
The record's vector shows a local attack vector with high privileges required, so an attacker needs a way onto the server first.
What fixes CVE-2024-55930?
Xerox lists it as mitigated in Workplace Suite 5.6.701.9. Review the folder permissions as well, since a prior install may have left them loose.
Sources
Last reviewed: 19 October 2026.
